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• Four suspects were charged with stealing copper from the Trixie Mine in Utah, causing 
more than $1.5 million in damages. - Salt Lake Tribune (See item 8) 

• JPM organ Chase warned approximately 465,000 prepaid UCard debit card holders that 
their unencrypted personal information may have been compromised following a July 
cyberattack. - Reuters (See item 10 ) 

• IntelCrawler researchers identified a point-of-sale botnet named StarDust that has 
compromised more than 20,000 payment cards since August. - Ars Technica (See item 13 ) 

• An electrical issue in a BART train caused a brake issue that injured 20 and prompted an 
evacuation of approximately 700 people from the train in Orinda, California. - KGO-TV 7 
San Francisco (See item 19 ) 
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Energy Sector 



1. December 4, Associated Press - (Idaho) Eastern Idaho power outage ends; 
electricity fully restored to 53,000 customers. More than 53,000 Rocky Mountain 
Power customers in southeastern Idaho had their power restored December 4 after a 
technical problem at one of the utility’s substations caused an outage. 

Source: 

http://www.dailyioumal.net/view/storv/08bfl86087f2417d813d4d91a9fbd8f6/ID— 

Idaho-Power-Outage/ 

2. December 3, KCBS 2 Los Angeles - (California) Thousands without power in Santa 
Monica. Southern California Edison crews worked to restore power to an estimated 
58,000 customers in the Santa Monica area after a sporadic power outage December 3- 
4. 

Source: http://losangeles.cbslocal.com/2013/12/03/thousands-without-power-in-santa- 
monica/ 

[ Return to top ] 

Chemical Industry Sector 

3. December 4, U.S. Department of Labor - (New Jersey) New Jersey pyrotechnics 
company cited for 12 safety violations by US Labor Department's OSHA; agency 
proposes $48,300 penalty. The U.S. Department of Labor's Occupational Safety and 
Health Administration proposed $48,300 in fines and cited Garden State Fireworks 
following a May inspection, for 12 safety violations at the company's facility in 
Millington. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25 197 

4. December 4, Sacramento Bee - (California) Chemical spill sends seven to hospital at 
Aerojet Rocketdyne campus. A 200-gallon spill of chemical waste that occurred 
when a metal container of chemical byproducts was accidentally punctured at an 
Aerojet Rockedyne facility in Rancho Cordova sent 7 people to the hospital December 
4. The building is owned by AMP AC Fine Chemicals. 

Source: http://www.sacbee.com/2013/12/04/597147Q/chemical-spill-sends-seven- 
to.html 

5. December 4, KCBS 2 Los Angeles - (California) Investigators looking into chlorine 
gas release at Pittsburg plant. Authorities are investigating the cause of two releases 
of chlorine gas December 3 and December 4 from heat exchange units at the K2 Pure 
Solutions chemical plant inside the Dow Chemical Facility in Pittsburg, California. 
Source: http://sanfrancisco.cbslocal.com/2013/12/04/investigators-looking-into- 
chlorine-gas-release-at-pittsburg-plant/ 



- 2 - 



[ Return to top ] 



Nuclear Reactors, Materials, and Waste Sector 

6. December 5, Washington Post - (International) Stolen cobalt-60 found in Mexico; 
curious thieves likely doomed. Mexican authorities announced that a stolen truck 
hauling cobalt-60 to a radioactive waste disposal facility was found abandoned along 
with its cargo. The cobalt-60 was found removed from its casing, and authorities stated 
that the thieves likely received a fatal dose of radiation. 

Source: http://www.washingtonpost.com/world/stolen-cobalt-60-found-in-mexico- 
curious-thieves-likely-doomed/2013/12/05/262ef990-5d66-lle3-8d24- 
31c016b976b2 story.html 

7. December 4, Associated Press - (Nebraska) OPPD: Ft. Calhoun ready to go online. 
The operator of the Fort Calhoun Nuclear Power Station north of Omaha announced 
that the plant is ready to be restarted after being shut down since 2011. The plant must 
first get U.S. Nuclear Regulatory Commission approval to restart. 

Source: http://www.wowt.com/home/headlines/OPPD— Ft-Calhoun-Ready-to-Go- 
Online-234480691.html 
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Critical Manufacturing Sector 

8. December 4, Salt Lake Tribune - (Utah) Metal thieves hit Utah copper mine, do $1.5 
million in damage. Four suspects were charged with allegedly stealing copper from the 
Trixie Mine copper, gold, and silver mine near Eureka, Utah, between December 24, 
2012 and October 25, causing more than $1.5 million in damage. 

Source: http://www.sltrib.com/sltrib/news/57218804-78/amp-metal-mine- 
copper.html.csp 

9. December 4, U.S. Consumer Product Safety Commission - (National) Denver Global 
Products recalls Multi-Purpose Yard Vehicles due to laceration, fire hazards; sold 
exclusively at Lowe’s stores. Denver Global Products announced a recall of about 

1 1,000 Multi-Purpose Yard Vehicles due to an issue that can cause the mower blades to 
detach and an issue that can cause fuel lines to leak. 

Source: http://www.cpsc.gov/en/Recalls/Recall-Alerts/2014/Denver-Global-Products- 
Recalls-Multi-Purpose- Y ard- Vehicles/ 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 



10. December 5, Reuters - (International) JPMorgan warns 465,000 card users on data 
loss after cyberattack. JPMorgan Chase notified around 465,000 holders of prepaid 
UCard debit cards that their unencrypted personal information may have been obtained 
by hackers during a July data breach. The cards were issued to corporations to pay 
employees and to government agencies to pay benefits and tax refunds. 

Source: http://www.reuters.com/article/2013/12/05/us-ipmorgan-dataexposed- 
idUSBRE9B405R20131205 

11. December 5, Softpedia - (International) Personal and financial details compromised 
in Maple Grove Farms of Vermont hack. B&G Foods North America notified 
customers that a November 16 cyberattack on the Maple Grove Farms of Vermont Web 
site may have revealed personal information and payment card numbers. 

Source: http://news.softpedia.com/news/Personal-and-Financial-Details-Compromised- 
in-Maple-Grove-Farms-of-Vermont-Hack-406145.shtml 

12. December 5, Softpedia - (International) International payment card fraud ring 
based in Latvia shut down. European Union authorities arrested eight suspects in an 
alleged international payment card fraud organization based in Fatvia that stole 
hundreds of thousands of Euros and used stolen card data to make payments in the U.S. 
and other countries. 

Source: http://news.softpedia.com/news/International-Payment-Card-Fraud-Ring- 
Based-in-Fatvia-Shut-Down-406373.shtml 

13. December 4, Ars Technica - (International) Credit card fraud comes of age with 
advances in point-of-sale botnets. Researchers at IntelCrawler identified one of the 
first known point-of-sale (PoS) botnets, a botnet run by a variant of Dexter dubbed 
StarDust. The botnet is active and has compromised more than 20,000 payment cards 
since August. 

Source: http://arstechnica.com/securitv/2013/12/credit-card-fraud-comes-of-age-with- 
first-known-point-of-sale -botnet/ 

14. December 4, U.S. Department of Justice - (California) Federal agents arrest 
operators of loan modification scam that targeted struggling homeowners. Federal 
agents arrested two California men December 3 for allegedly running a fraudulent loan 
modification scheme under the names Rodis Faw Group and America’ s Faw Group 
that defrauded homeowners of at least $12 million. 

Source: http://www.fbi.gov/losangeles/press-releases/2013/federal-agents-arrest- 
operators-of-loan-modification-scam-that-targeted-struggling-homeowners 
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Transportation Systems Sector 
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15. December 5, WJW 8 Cleveland - (Ohio) $500,000 bond set for man charged in post 
office explosion. A man was arrested and charged after he entered the Cuyahoga Falls 
Police Department and reported that he set off an explosive device at a post office in 
Summit County December 5. Authorities found damage to a window in the back of the 
post office but did not find any devices. 

Source: http://fox8.com/2013/12/05/small-device-causes-post-office-scare/ 

16. December 5, Associated Press - (New Jersey) Freight train derailment closes 
turnpike ramps. An accident involving two freight train tanker cars carrying a 
flammable liquid that derailed in Carteret, New Jersey, prompted the precautionary 
closure of ramps at Interchange 12 on the New Jersey Turnpike while crews cleaned-up 
the scene December 4. 

Source: http://www.nbc40.net/storv/24141234/2-cars-of-freight-train-derail-in-nj 

17. December 5, Associated Press - (Wyoming) Wyoming Department of 
Transportation closes Wyo. 70 over Battle Pass. The Wyoming Department of 
Transportation closed the highway over Battle Pass, between Encampment and Baggs, 
and Snowy Range, between Laramie and Saratoga, due to snow and poor visibility. 
Source: 

http://www.therepublic.com/view/story/179279f26da7461695ae2280bba23f5f/WY— 

Road-Closure 

18. December 4, Baton Rouge Advocate - (Louisiana) Truck overturns, leaks molten 
sulfur onto River Road. An accident involving an 18-wheel semi-truck carrying 
molten sulfur that overturned on Louisiana Highway 1 8 blocked both lanes of the 
highway and closed a portion of River Road in St. James Parish for 7 hours while 
HAZMAT crews cleaned up the spill December 4. 

Source: http://theadvocate.com/home/7758606-125/truck-overtums-leaks-molten-sulfur 

19. December 4, KGO-TV 7 San Francisco - (California) BART train brake problem 
prompts evacuations. An electrical short in a BART train caused the brakes to disable 
and filled some of the cars with smoke at the Berkeley Hills Tunnel in Orinda 
December 4, trapping approximately 700 people on the train for about 1 hour before it 
was evacuated. Twenty people were treated or taken to area hospitals. 

Source: http://abclocal.go.com/kgo/story?section=news/local/east bay&id=9348473 

20. December 4, Long Beach Patch - (California) Blue Line service in Long Beach 
suspended until noon. A damaged power system caused the Long Beach Transit Blue 
Line service to be suspended from Willow Station through the downtown loop for 
several hours December 4. 

Source: http://longbeach-ca.patch.com/groups/around-town/p/blue-line-service-in-long- 
beach-suspended-until-noon 

Lor another story, see item 24 
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Food and Agriculture Sector 



21. December 4, Great Falls Prairie Star - (National) FSIS releases comprehensive 
strategy to reduce Salmonella. The U.S. Department of Agriculture’s Food Safety and 
Inspection Service released its Salmonella Action Plan December 4, a strategy 
outlining steps to address Salmonella in meat and poultry products. 

Source: http://www.theprairiestar.com/news/livestock/fsis-releases-comprehensive- 
strategy-to-reduce-salmonella/article d2585612-5d0c-lle3-a209-001a4bcf887a.html 

22. December 4, eSecurity Planet - (Washington) Washington grocery stores recover 
from cyberattack. Following recent attacks against its payment processing system, 
URM Stores, a grocery wholesaler that processes payments for several grocery stores in 
the Pacific northwest, announced completion of enhanced security measures 
implemented to block cyberattacks against its payment processing system, allowing 
member stores to resume accepting credit and debit cards. 

Source: http://www.esecuritvplanet.com/network-securitv/washington-grocery-stores- 
recover-from-cyber-attack.html 

23. December 3, Food Safety News - (South Dakota) South Dakota’s new raw milk rules 
effective Dec. 11. The South Dakota secretary of agriculture approved new rules 
effective December 1 1 on the production, testing, and labeling of raw milk in the State, 
which includes pasteurization labels and bottling dates. 

Source: http://www.foodsafetvnews.com/2013/12/south-dakotas-new-raw-milk-rules- 
take-effect-on-dec- 1 1/ 
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Water and Wastewater Systems Sector 

24. December 4 , Homer News - (Alaska) State, feds to close three area waste wells. An 
agreement between the U.S. Environmental Protection Agency and the Alaska 
Department of Transportation and Public Facilities (DOTPF) will close 55 motor-vehicle 
waste disposal wells at State vehicle repair and maintenance facilities due to the risk they 
pose to drinking water. The DOTPF will also pay $ 

Source: http://homemews.com/homer-news/local-news/2013-12-04/state-feds-to-close- 
three-area-waste-wells 

25. December 4, Baltimore Sun - (Maryland) Board OKs $126 million for Back River 
Treatment Plant. The Maryland Board of Public Works approved a $126 million grant 
from the Bay Restoration Fund December 4 to upgrade the Back River Wastewater 
Treatment Plant in order to reduce nutrient pollution, part of a $686 million State and 
local project for the Chesapeake Bay to reduce nitrogen and phosphorus pollution. 
Source: http://www.baltimoresun.com/news/maryland/politics/blog/bs-md-bpw-back- 
river-201 3 1204,0,5480851 .story 

26. December 4, Pittsburgh Tribune-Review - (Pennsylvania) 15 spills illegally discharged 
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sewage into Murrysville’s Turtle Creek. The Pennsylvania Department of 
Environmental Protection (DEP) found that a faulty sewage line illegally discharged 
more than 1 million gallons of sewage into Turtle Creek in Murrysville 15 times between 
July and September. Fines have yet to be determined by the DEP. 

Source: 

http://triblive.com/neighborhoods/vourmurrvsville/vourmurrysvillemore/5181417- 
7 4/authority-board-murrys ville 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

27. December 5, KDFW 4 Dallas - (Texas) All-clear at Collins County Courthouse after 
bomb threat. McKinney police received a phoned bomb threat against the Collins 
County Courthouse prompting its evacuation December 4 for nearly 3 hours. 

Authorities cleared the scene after nothing suspicious was found. 

Source: http ://w w w .myfoxdfw .com/story/24 13438 3/collin-county-courthouse- 
evacuated-due-to-bomb-threat 

28. December 4, Associated Press - (Arizona) Arizona commission Oks fine in 
firefighter deaths. The Arizona Industrial Commission approved a nearly $560,000 
fine December 4 against the Arizona Forestry Division in the deaths of 19 firefighters 
during the Yarnell Hill Fire after the State’s Division of Occupational Safety and 
Health had proposed a trio of citations along with penalties during its investigation of 
workplace violations. 

Source: http://news.msn.com/us/arizona-commission-oks-fine-in-firefighter-deaths-l 

29. December 4, Associated Press - (Florida) Suspect in custody after Fla. school 
shooting. Police arrested a student from West Orange High School in Winter Garden 
December 4 after the teenager shot and wounded another student during a fight at the 
bus pickup area. 

Source: http://news.msn.com/crime-iustice/suspect-in-custodv-after-fla-school-shooting 

30. December 4, Associated Press - (Connecticut) 2,700 rounds of ammo found at Conn, 
man’s home. Police arrested a Connecticut college student carrying two handguns on 
campus at the University of New Haven in West Haven December 3. Authorities also 
found an assault rifle in his car and 2,700 rounds of ammunition and newspaper 
clippings of the Aurora, Colorado theater shooting in his home. 

Source: http://news.msn.com/crime-iustice/270Q-rounds-of-ammo-found-at-conn- 
mans-home 
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For another story, see item 10 
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Emergency Services Sector 

For additional stories, see items 28 and 35 
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Information Technology Sector 

31. December 5, Softpedia - (International) Cybercriminals hijack WP sties with 
backdoored SEO plugin. Researchers at Sucuri identified a cyberattack that lures 
owners of WordPress Web sites with a malicious version of a legitimate search engine 
optimization (SEO) plugin that adds a backdoor to the user’s site and can direct visitors 
to spam or malicious Web sites. 

Source: http://news.softpedia.com/news/Cvbercriminals-Hiiack-WP-Sites-with- 
Backdoored-SEQ-Plugin-40627 9 . shtml 

32. December 4, Threatpost - (International) VMware patches privilege escalation 
vulnerability. VMware published updates for certain versions of its Workstation, 
Fusion, ESXi, and ESX products, closing a vulnerability that could allow privilege 
escalation in older versions of Windows. 

Source: http://threatpost.com/vmware-patches-privilege-escalation- 
vulnerabilit y/ 103100 

33. December 4, IDG News Service - (International) Passwords reset after ‘Pony’ botnet 
stole 2 million credentials. Online services affected by the Pony botnet’s disclosure of 
login credentials, including Twitter, Facebook, ADP, and Linkedln, reset users’ 
passwords to prevent unauthorized access. 

Source: http://www.networkworld.com/news/2013/12Q513-passwords-reset-after- 
39pony39-botnet-276599.html 

For another story, see item 13 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 
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Nothing to report 
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Commercial Facilities Sector 

34. December 5, Contra Costa Times- (California) Apartment fire temporarily displaces 
75 residents. A December 5 fire at a 100-unit apartment building in San Leandro 
temporarily displaced approximately 75 residents and injured two. The cause is still 
under investigation and some residents were allowed to return to their homes. 

Source: http://www.mercurynews.com/breaking-news/ci 24659874/san-leandro- 
apartment-fire-displaces-75-residents 

35. December 4, WNBC 4 New York City - (New York) Man indicted in Times Square 
police shooting. A mentally-disturbed man was indicted for felony assault and reckless 
endangerment in a September 14 incident near Times Square that left two bystanders 
injured after police drew their weapons when the man reached for what appeared to be 
a weapon. The officer’s actions are under review by the Manhattan District Attorney’s 
Office. 

Source: http://www.nbcnewvork.com/news/local/Police-Shooting-Times-Square- 
Indictment-234530441.html 

36. December 4, CNY Central - (New York) Marshall’s Plaza in Cicero evacuated after 
propane tank leaks in parking lot. Marshall’s Plaza in Cicero was evacuated for over 
2 hours when a truck with a 100-pound propane tank began leaking in the parking lot. 
HAZMAT crews were called and no injuries or damage was reported. 

Source: http://www.cnycentral.com/news/story.aspx?id=979341 

37. December 4, KCPQ 13 Tacoma - (Washington) Thieves allegedly tried to burn 
building in effort to hide $600K wine heist. Two suspects allegedly stole around 
$648,000 worth of wine from the Esquin Wine Merchants storage unit in Seattle 
November 29 and attempted but failed to set fire to the building to cover their tracks. 
One suspect was arrested and one remains at large. 

Source: http://ql3fox.com/2013/12/04/wine-snobs-allegedly-trv-to-bum-building-in- 
effort-to-hide-500k- wine-heist/ 
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Dams Sector 



38. December 5, West Side Leader - (Ohio) Dam removal leads to changes in river. 
Authorities in Cuyahoga Falls reported a reduction in odor and an increase in water 
quality in the Cuyahoga River after the July removal of the Mill Dam and Powerhouse 
Dam. 

Source: http://www.akron.com/akron-ohio-communitv-news.asp?aID=21467 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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